{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T13:03:18.281","vulnerabilities":[{"cve":{"id":"CVE-2017-9552","sourceIdentifier":"security@synology.com","published":"2017-06-13T13:29:00.173","lastModified":"2026-06-17T01:28:21.023","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by \"synophoto_dsm_user --auth USERNAME PASSWORD\", and local users are able to obtain credentials by sniffing \"/proc/*/cmdline\"."},{"lang":"es","value":"Un fallo de diseño en la autenticación en Synology Photo Station de la versión 6.0-2528 a la 6.7.1-3419 permite que usuarios locales obtengan credenciales mediante cmdline. Synology Photo Station emplea el programa synophoto_dsm_user para autenticar el nombre de usuario y la contraseña por \"synophoto_dsm_user --auth USERNAME PASSWORD\" y los usuarios locales pueden obtener credenciales rastreando \"/proc/*/cmdline\"."}],"affected":[{"source":"security@synology.com","affectedData":[{"vendor":"Synology","product":"Synology Photo Station","versions":[{"version":"6.0-2528 through 6.7.1-3419","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"security@synology.com","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.0-2528:*:*:*:*:*:*:*","matchCriteriaId":"CEE9CF02-0D29-4E25-940D-ABA70396800E"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.0-2636:*:*:*:*:*:*:*","matchCriteriaId":"4E5CB965-0DB4-470C-810F-93255FD6EE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.0-2638:*:*:*:*:*:*:*","matchCriteriaId":"0AF0D228-FAD1-44AF-A103-CF4157ADB687"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.0-2639:*:*:*:*:*:*:*","matchCriteriaId":"DD30021D-5B1B-4694-AAAB-DA87991B4B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.0-2640:*:*:*:*:*:*:*","matchCriteriaId":"BA2F2249-CBAA-48AD-94DF-2CF34D44A436"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2944:*:*:*:*:*:*:*","matchCriteriaId":"EF213FE4-EE94-41A0-B240-F3F66253380D"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2958:*:*:*:*:*:*:*","matchCriteriaId":"56C66145-57EC-4482-A60A-5C91655ED43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2960:*:*:*:*:*:*:*","matchCriteriaId":"612BD0F4-09E4-46F6-8069-628DC5F14C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2962:*:*:*:*:*:*:*","matchCriteriaId":"314BBF84-AAFD-4B8B-8C7C-BEA9A7D86D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2963:*:*:*:*:*:*:*","matchCriteriaId":"75FAA458-4EF1-4B7C-9321-8838C29C6111"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2964:*:*:*:*:*:*:*","matchCriteriaId":"DA143091-3E14-4A11-B8AD-21685EBCE77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.3-2965:*:*:*:*:*:*:*","matchCriteriaId":"AFB960C1-0182-4711-ADC2-D15E7EE73EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.4-3166:*:*:*:*:*:*:*","matchCriteriaId":"58249851-948D-456A-9D92-816CF9D03D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.5.0-3218:*:*:*:*:*:*:*","matchCriteriaId":"A27B802A-2213-410B-A517-1EA03B4B3A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.5.1-3223:*:*:*:*:*:*:*","matchCriteriaId":"82DCC751-6662-44AC-869C-D25D3B17C8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.5.2-3225:*:*:*:*:*:*:*","matchCriteriaId":"3BCD0E8C-A452-455B-ADD3-C162B684BB6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.5.3-3226:*:*:*:*:*:*:*","matchCriteriaId":"A7671D8F-19B2-44FA-A4F2-1A87C831944B"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.6.0-3339:*:*:*:*:*:*:*","matchCriteriaId":"7090BCE8-A479-4FE6-8771-6B5C3385DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.6.1-3345:*:*:*:*:*:*:*","matchCriteriaId":"FA0BAE16-43E4-47F5-AA0B-83B671BDAE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.6.1-3346:*:*:*:*:*:*:*","matchCriteriaId":"1202C8C4-0E03-4BA6-8644-85294B4B6A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.6.2-3346:*:*:*:*:*:*:*","matchCriteriaId":"184D0C67-4C56-4E6F-AC09-A7AE8AFEF538"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.6.3-3347:*:*:*:*:*:*:*","matchCriteriaId":"C8A45D93-2194-44C0-8F9E-16F07D6221A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.7.0-3414:*:*:*:*:*:*:*","matchCriteriaId":"12F484A6-FAF7-405D-938F-6747C07954B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:photo_station:6.7.1-3419:*:*:*:*:*:*:*","matchCriteriaId":"ECEE3B09-FBBF-476A-AACA-07CF2C047734"}]}]}],"references":[{"url":"http://blog.crozat.net/2017/06/synology-photostation-password-vulnerabilty.html","source":"security@synology.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.synology.com/en-global/support/security/Photo_Station_CVE_2017_9552","source":"security@synology.com","tags":["Third Party Advisory"]},{"url":"http://blog.crozat.net/2017/06/synology-photostation-password-vulnerabilty.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.synology.com/en-global/support/security/Photo_Station_CVE_2017_9552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}